Training course · Microsoft 365 Copilot · Compliance & Data Protection

Microsoft 365 Copilot for Compliance and Data Protection Teams

Use Microsoft 365 Copilot and Copilot Chat in Word, Excel, PowerPoint, Outlook and Teams productively, securely and in line with permissions.

Duration
1 day (7 hrs)
Format
Online or on-site
Language
German or English
Participants
open dates or exclusive for your team
Certificate
Certificate of attendance

Overview

This course connects Microsoft 365 Copilot with the everyday processes of Compliance & Data Protection. Participants work on realistic scenarios and leave with prompts, workflows and checklists they can use straight away.

Microsoft 365 Copilot brings AI right into the applications where your daily work happens: Word, Excel, PowerPoint, Outlook and Teams. What sets it apart from publicly available chatbots is its grounding in your organisation's data via Microsoft Graph – Copilot can draw on the emails, meetings, chats and documents you already have access to. In this practical day you learn to use that connection deliberately: drafting content from existing files, summarising inboxes and long threads, following up on meetings and generating presentations from Word documents.

You also learn how the licensed Copilot differs from Copilot Chat, when web-grounded and when work-grounded answers make sense, and how to use both prebuilt and your own agents. A central topic is the permission model: Copilot only surfaces what you are allowed to see, so sharing settings in SharePoint, OneDrive and Teams directly determine the quality and security of results. You leave with tested prompts for every Office application and a clear understanding of responsible use within your tenant.

Compliance and data protection teams must keep track of a growing body of rules, from the GDPR and whistleblower protection to supply chain due diligence and the EU AI Act. Generative AI can structure and accelerate this work: AI assistants summarise new regulations, produce gap analyses against existing policies, support records of processing activities and data protection impact assessments and draft clear training content. Automation helps with data subject requests, contract reviews and vendor risk assessments. At the same time, compliance teams are expected to steer AI use across the organisation: AI policies, risk classification under the AI Act and staff AI literacy obligations. Teams that use AI confidently themselves can advise the business better and design effective governance.

The course is delivered live – either online in a virtual classroom or on-site in our training rooms in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run it exclusively for your team.

Who is this course for?

  • Compliance officers and managers
  • Data protection officers and privacy coordinators
  • Information security officers
  • Governance, risk and compliance staff
  • AI governance leads

Typical challenges we address

  • Tracking numerous new regulations and translating them into internal requirements
  • Keeping records of processing and impact assessments up to date
  • Advising business units quickly and soundly when they introduce new tools
  • Steering organisation-wide AI use in a compliant way

What you will be able to do

  • You use Copilot in Word, Excel, PowerPoint, Outlook and Teams for your recurring tasks.
  • You write prompts that draw on existing files, emails and meetings as context.
  • You distinguish between Microsoft 365 Copilot and Copilot Chat and choose the right mode.
  • You use prebuilt agents and create a simple agent of your own for your team.
  • Use AI for regulatory analysis, data protection documentation and contract reviews.
  • Build AI governance with a policy, a tool inventory and risk classification.
  • Advise business units soundly on GDPR and AI Act requirements for AI use.

Course outline

Module 1 Copilot fundamentals and Microsoft Graph
  • Microsoft 365 Copilot and Copilot Chat: capabilities and licensing
  • Grounding in organisational data through Microsoft Graph
  • Switching between web and work context and referencing specific files
  • Prompt structure with goal, context, source and expectations
Module 2 Word and PowerPoint
  • Drafting from existing documents, notes and emails
  • Rewriting, shortening, adjusting tone and summarising text
  • Generating presentations from Word documents or outlines
  • Refining slides, adding speaker notes and sharpening key messages
Module 3 Excel and data analysis
  • Querying tables, spotting trends and highlighting outliers
  • Getting suggestions for formulas, calculated columns and conditional formatting
  • Creating charts and pivot analyses from natural language
  • Sanity-checking results and ensuring data quality
Module 4 Outlook, Teams and agents
  • Summarising long email threads and drafting replies
  • Summarising Teams meetings and extracting action items and open questions
  • Using Copilot Pages and Notebooks for collaborative work
  • Using prebuilt agents and creating your own with Agent Builder
Module 5 Permissions, data protection and governance
  • The permission model: Copilot only shows what you can access
  • Identifying oversharing in SharePoint, OneDrive and Teams
  • Sensitivity labels, data boundaries and GDPR considerations
  • Usage policies, team adoption and measuring impact
Module 6 Practice lab: Compliance & Data Protection
  • Regulatory gap analysis
  • Records of processing and DPIAs
  • Reviewing data processing agreements
  • Data subject requests
  • Building AI governance
  • Training and awareness
Module 7 Data protection, quality & transfer to daily work
  • Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.
  • Ground rules for safe AI use in your team
  • Checking results: facts, sources, tests and the four-eyes principle
  • Personal action plan for the next 30 days
  • Open questions, outlook and resources for further learning

Practical scenarios from your field

Regulatory gap analysis

An AI assistant summarises new regulations, compares requirements with existing policies and processes and produces a structured list of gaps and actions for expert assessment.

Records of processing and DPIAs

Process descriptions and interviews are turned into draft entries for the record of processing activities and risk analyses for data protection impact assessments, reviewed by the DPO.

Reviewing data processing agreements

AI checks vendors' data processing agreements and privacy documentation for the mandatory content under Article 28 GDPR, third-country transfers and technical measures and flags deviations from the internal standard.

Data subject requests

Automations log access and erasure requests, monitor deadlines and draft responses, while data searches and final approval remain with the responsible staff.

Building AI governance

AI helps draft AI policies, build an inventory of AI systems in use and classify them according to the EU AI Act risk categories as a basis for governance board decisions.

Training and awareness

Policies are turned into clear learning modules, case studies and quizzes on data protection, anti-money laundering, anti-corruption or AI literacy, tailored to target groups across the organisation.

Prerequisites

Confident everyday use of Word, Excel, PowerPoint, Outlook and Teams; no prior AI knowledge is required. You work in compliance, data protection or information security and are familiar with the basics of the GDPR.

Technical requirements

A laptop with access to Microsoft 365 via your work account; a Microsoft 365 Copilot licence is ideal for all exercises, while Copilot Chat covers part of the content.

Data protection & compliance

Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.

Suggested dates

All dates are suggestions – your preferred date is always possible.

  • Mon, 23 November 2026 Online Request
  • Tue, 1 December 2026 Kaiserslautern Request
  • Thu, 10 December 2026 Online Request
  • Fri, 22 January 2027 Augsburg Request
  • Wed, 27 January 2027 Online Request
  • Wed, 10 February 2027 Salzburg Request

Frequently asked questions

What is the difference between Microsoft 365 Copilot and Copilot Chat?

Copilot Chat is available to many work accounts without an additional licence and answers mainly from web content and uploaded files. The licensed Microsoft 365 Copilot also reaches your emails, meetings and documents through Microsoft Graph and is built directly into Word, Excel, PowerPoint, Outlook and Teams.

Can Copilot see my colleagues' confidential files?

Copilot respects existing permissions and only surfaces content you can already access yourself. Problems arise when files are shared too broadly – with the entire organisation, for instance. In the course you learn how to spot such oversharing and how to fix it properly together with your IT team.

Do I need prompting experience for this course?

No. We start with the fundamentals of good prompts and practise them directly in the Office applications. What matters is that you are comfortable using Word, Excel, PowerPoint, Outlook and Teams day to day. Everything else – from referencing files to working with agents – we build up step by step through realistic tasks.

What does the EU AI Act actually require of companies?

Since early 2025, certain AI practices have been prohibited and organisations must ensure AI literacy among staff. Further obligations cover transparency and providers and deployers of high-risk systems. In the course we classify typical use cases and work out which governance components your organisation needs.

Can data protection officers use AI themselves?

Yes, for example for contract reviews, draft documentation or training content, provided no unnecessary personal data is processed. The legal assessment remains with you. Hands-on experience with AI also improves your advice to the business, because you can judge opportunities and risks more realistically.

How much does “Microsoft 365 Copilot for Compliance and Data Protection Teams” cost?

The course costs a flat €949 plus VAT per participant – whether online or on-site. This includes 1 training day(s) with a live trainer, course materials, a lab environment and a certificate of attendance.

Can I suggest my own date?

Yes. Our suggested dates are just a guide. In the request form you can always describe your preferred date or period in free text – we check availability and confirm within one working day.

Is the course online or on-site?

Both are possible: live online in a virtual classroom or on-site in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart or Kaiserslautern. We can also run the course exclusively for your team.

More courses for Compliance and Data Protection Teams

More Microsoft 365 Copilot courses

All 45 Microsoft 365 Copilot courses

Microsoft 365 Copilot · MunichMicrosoft 365 Copilot · SalzburgMicrosoft 365 Copilot · BerlinMicrosoft 365 Copilot · AugsburgMicrosoft 365 Copilot · HanoverMicrosoft 365 Copilot · BremenMicrosoft 365 Copilot · StuttgartMicrosoft 365 Copilot · KaiserslauternMicrosoft 365 Copilot · Online